DevSecOps Engineer

Coosto; Eindhoven; Hybrid; EUR 70,000 - 110,000; Full time

Benefits offered by this job

26 days vacation

Home/office hybrid

Home office allowance

Travel reimbursement

Vitality Week & activities

Culture Club activities

Job summary

Coosto is seeking a DevSecOps Engineer to turn our almost greenfield security automation into a scalable, secure CI/CD pipeline in Eindhoven. You’ll partner with SREs to embed security by design across Jenkins pipelines, Kubernetes (EKS), and scanning tools.

You’ll implement guardrails, integrate Snyk/Trivy/Aqua/Grype, and translate findings into actionable developer improvements, enabling faster, safer delivery while shaping our tooling choices.

Qualifications

• Extensive experience with Jenkins (Pipeline as Code).
• Kubernetes (EKS) expertise and ability to isolate workloads.
• Experience integrating security tools (Snyk, Trivy, Aqua, Grype) beyond SonarQube.
• Knowledge of AWS, Terraform, and Ansible to discuss with SREs.
• Builder mentality to define processes and tooling when things are not yet defined.

Responsibilities

• Design and implement security guardrails in Jenkins pipelines to block vulnerabilities before production.
• Secure Kubernetes environments (EKS): image scanning, runtime security, pod security standards.
• Support the SRE team; validate security of scripts and configurations (Terraform/Ansible).
• Add tools for Secret Detection and Software Composition Analysis (SCA) beyond SonarQube.
• Translate security findings into concrete actions for developers to enable faster, safer delivery.

Skills

Jenkins

Kubernetes

Snyk

Trivy

Aqua

Grype

AWS

Terraform

Ansible

Pipeline as Code

Tools

Jenkins

Terraform

Ansible

AWS CLI

Kubernetes

Job description

We have a solid foundation with AWS, Jenkins, and SonarQube, but the "freedom" in our current CI/CD pipeline needs to be converted into a secure and scalable process. As a DevSecOps Engineer, you will receive an almost greenfield mandate to build security automation from the ground up. You will work closely with our SREs (Site Reliability Engineers). While they focus on the stability and scalability of the infrastructure, you ensure that everything running on that infrastructure is "secure by design."

What you’re going to do

• Security Guardrails: You design and implement technical guards in our Jenkins pipelines that block vulnerabilities before they reach the production environment.
• EKS & Container Security: You secure the Kubernetes environments where our developers work. Think of image scanning, runtime security, and tightening pod security standards.
• Collaborative Engineering: You support the SRE team. You understand their world (Terraform/Ansible), but your added value lies in validating the security of those scripts and configurations.
• Advanced Scanning: You go beyond the current SonarQube implementation by adding tools for Secret Detection and Software Composition Analysis (SCA).
• Feedback Loop: You translate security findings into concrete actions for developers, enabling them to build faster and more securely.

Who you are

• The Pipeline is your Home: You have extensive experience with Jenkins (Pipeline as Code).
• K8s Expert: You are technically highly skilled in Kubernetes (EKS) and know how to isolate and secure workloads within a cluster.
• Security Tools: You have experience integrating security tools (besides SonarQube, examples include Snyk, Trivy, Aqua, or Grype).
• SRE Affinity: You don't have to run the cloud infra alone, but you have enough knowledge of AWS, Terraform, and Ansible to be a valuable discussion partner for the SREs.
• Builder Mentality: You find it a challenge that many processes are not yet defined and dare to make choices in tooling and methodology.

Who we are and what we offer

With Coosto, organizations can effortlessly manage public interactions and efficiently handle questions, complaints, and feedback. From publishing content and managing customer contact via webcare to real-time sentiment monitoring and KPI-based analyses, Coosto provides everything needed to optimize social media strategies and achieve measurable results.

At Coosto, you’ll work alongside enthusiastic, multicultural colleagues in a professional yet informal working environment. You’ll collaborate using a high-end tech stack with experienced developers who are committed to delivering high-quality solutions. In addition to a competitive salary and an exciting challenge

In addition, we offer you:

• 26 days of vacation!
• In addition to two fixed office days, you can work both from home and at the office.
• We offer a home office allowance and a travel reimbursement (public transport or mileage).
• We promote a healthy work environment through our annual Vitality Week, sports activities, fresh fruit and healthy snacks every week, and support from an internal coach.
• Our Coosto Culture Club organizes fun activities and events throughout the year to connect colleagues and create an inspiring workplace.

Approximately 100 colleagues

An inspiring working environment with approximately 100 colleagues in Eindhoven & Alicante.

In addition to two fixed office days, you can work both from home and at the office. We offer a home office allowance and a travel reimbursement (public transport or mileage).

IT Resources

Laptop and other IT resources that you need for your work.

Drinks & Company outings

The nicest friday afternoon drinks, pizza sessions, always a well-stocked fridge with (healthy) snacks, and the most fantastic Christmas party in Eindhoven. Next to that we have the coolest company outings such as: Virtual Reality gaming, yoga, karting, salsa dancing and pub quizzes. Something for everyone!

Development

Professional and personal development with great responsibility and exciting challenges, supported by a personal development budget of €1,000.

In conclusion

Coosto is an equal opportunity employer that values diversity. All qualified applicants are considered for employment.